Insecure Storage of Sensitive Information
CWE-922
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
We track 70 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
Latest Insecure Storage of Sensitive Information vulnerabilities
- 9.9 Critical severity
CoPilot: Improper Neutralization of Input During Web Page Generation
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including `customer_user`, can submit stored markup through `PO
- 7.3 High severity
MOVEit Transfer: Insecure Storage of Sensitive Information
Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
- 7.9 High severity
Synergis Softwire: Insecure Storage of Sensitive Information
Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers.
- 8.7 High severity
haxcms-nodejs: Improper Neutralization of Input During Web Page Generation
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the `/system/api/connectionSettings` endpoint allows an authenticated attacker to perform a c
- 8.1 High severity
kyverno: Insecure Storage of Sensitive Information
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 1.16.4, kyverno’s apiCall servicecall helper implicitly injects Authorization: Bearer ... using the kyverno controller serviceaccount token when a policy does not explici
- 9.1 Critical severity
Wallos: Server-Side Request Forgery
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, Wallos endpoints/logos/search.php accepts HTTP_PROXY and HTTPS_PROXY environment variables without validation, enabling SSRF via proxy hijacking. The server performs
- 7.6 High severity
Gophish: Exposure of Sensitive Information to an Unauthorized Actor
Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any scri
- 8.6 High severity
Verve Asset Manager: Insecure Storage of Sensitive Information
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.
- 8.8 High severity
MeetMe: Insecure Storage of Sensitive Information
Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5.
- 10.0 Critical severity
TNC Toolbox: Web Performance: Insecure Storage of Sensitive Information
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials (hostname, username, and API key) in files within the we
- 7.8 High severity
Print Virtual Appliance Host: Incorrect Permission Assignment for Critical Resource
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local inter-process communication (IPC) mechanism. The software st
- 9.1 Critical severity
Stored Value Unattended Payment Solution: Insecure Storage of Sensitive Information
Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card
- 7.1 High severity
HL330-DLS (for module MC7700): Insecure Storage of Sensitive Information
Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to
- 8.8 High severity
Alteryx Server: Insecure Storage of Sensitive Information
Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover
- 7.7 High severity
HPE Aruba Networking Private 5G Core: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download p
- 9.8 Critical severity
The TeleMessage service through 2025-05-05 implements authentication through a long-lived…
The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expiration time) that can be reused at a later date if discovered by an adversary.
- 7.7 High severity
Rhymix: Insecure Storage of Sensitive Information
Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.
- 8.2 High severity
Rx2 Pro Firmware: Insecure Storage of Sensitive Information
Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets
- 8.2 High severity
Multicluster Engine for Kubernetes: Insecure Storage of Sensitive Information
A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to
- 7.5 High severity
Export All Posts, Products, Orders, Refunds &…: Insecure Storage of Sensitive Information
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. This makes it possible for unauthenticated attackers to extract
- 7.2 High severity
Ruoyi: Insecure Storage of Sensitive Information
RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie.
- 7.5 High severity
Icecms: Insecure Storage of Sensitive Information
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.
- 7.5 High severity
Icecms: Insecure Storage of Sensitive Information
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.
- 9.1 Critical severity
Wapro ERP Desktop: Selection of Less-Secure Algorithm During Negotiation
Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0.
- 9.1 Critical severity
influxdb: Insecure Storage of Sensitive Information
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, E
- 8.2 High severity
security-advisories: Insecure Storage of Sensitive Information
Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so that an attacker that got access to a backup of the database and the Nextcloud config file, would be able to decrypt them. It is recommended
- 8.1 High severity
lunary-ai/lunary: Insecure Storage of Sensitive Information
In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists where account recovery hashes of users are inadvertently exposed to unauthorized actors. This issue occurs when authenticated users inspect responses from `G
- 8.1 High severity
lunary-ai/lunary: Insecure Storage of Sensitive Information
In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists due to the inclusion of single-use tokens in the responses of `GET /v1/users/me` and `GET /v1/users/me/org` API endpoints. These tokens, intended for sensiti
- 9.1 Critical severity
FactoryTalk Updater: Insecure Storage of Sensitive Information
An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required
- 7.5 High severity
net2: Insecure Storage of Sensitive Information
Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data.
- 7.5 High severity
Everest Backup – WordPress Cloud Backup…: Insecure Storage of Sensitive Information
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. Thi
- 7.5 High severity
meeting_server: Insecure Storage of Sensitive Information
Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintext passwords based on the obtained key information.
- 9.9 Critical severity
rke: Insecure Storage of Sensitive Information
When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.
- 7.5 High severity
Nomad server on Domino: Insecure Storage of Sensitive Information
HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.
- 7.5 High severity
Maven Archetype Plugin: Insecure Storage of Sensitive Information
Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin. This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0. Users are recommended to upgrade to version 3.3.0
- 7.5 High severity
smartplay_headunit_firmware: Insecure Storage of Sensitive Information
A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headuni
- 7.5 High severity
officeweb365: Improper Limitation of a Pathname to a Restricted Directory
Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface
- 9.8 Critical severity
ITSM: Insertion of Sensitive Information Into Debugging Code
An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Insecure Storage of Sensitive Information
The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data
- 7.5 High severity
FileOrganizer – WordPress File Manager: Insecure Storage of Sensitive Information
The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 via the 'fileorganizer_ajax_handler' function. This makes it possible for unauthenticated at